[Git][security-tracker-team/security-tracker][master] Track ckeditor3 as removed from unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Apr 11 15:34:13 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cc656688 by Salvatore Bonaccorso at 2025-04-11T16:33:05+02:00
Track ckeditor3 as removed from unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -127250,7 +127250,7 @@ CVE-2024-24816 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
 	[bookworm] - ckeditor <ignored> (Minor issue, only affects shipped example files)
 	[bullseye] - ckeditor <no-dsa> (Minor issue)
 	[buster] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1063537; unimportant)
+	- ckeditor3 <removed> (bug #1063537; unimportant)
 	[bookworm] - ckeditor3 <no-dsa> (Minor issue)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -127262,7 +127262,7 @@ CVE-2024-24815 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
 	[bookworm] - ckeditor <no-dsa> (Minor issue)
 	[bullseye] - ckeditor <no-dsa> (Minor issue)
 	[buster] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1063537)
+	- ckeditor3 <removed> (bug #1063537)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -179208,7 +179208,7 @@ CVE-2023-28439 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
 	[bookworm] - ckeditor <no-dsa> (Minor issue)
 	[bullseye] - ckeditor <no-dsa> (Minor issue)
 	[buster] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1059301)
+	- ckeditor3 <removed> (bug #1059301)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -270049,7 +270049,7 @@ CVE-2022-24728 (CKEditor4 is an open source what-you-see-is-what-you-get HTML ed
 	- ckeditor 4.19.0+dfsg-1
 	[bullseye] - ckeditor <no-dsa> (Minor issue)
 	[buster] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1015217)
+	- ckeditor3 <removed> (bug #1015217)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -297624,7 +297624,7 @@ CVE-2021-41165 (CKEditor4 is an open source WYSIWYG HTML editor. In affected ver
 	[bullseye] - ckeditor <no-dsa> (Minor issue)
 	[buster] - ckeditor <no-dsa> (Minor issue)
 	[stretch] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1015217)
+	- ckeditor3 <removed> (bug #1015217)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -316010,7 +316010,7 @@ CVE-2021-33829 (A cross-site scripting (XSS) vulnerability in the HTML Data Proc
 	{DLA-2813-1}
 	- ckeditor 4.16.0+dfsg-2
 	[buster] - ckeditor <no-dsa> (Minor issue)
-	- ckeditor3 <unfixed> (bug #1015217)
+	- ckeditor3 <removed> (bug #1015217)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)
@@ -495715,7 +495715,7 @@ CVE-2018-17960 (CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a
 	- ckeditor 4.11.1+dfsg-1 (unimportant)
 	[stretch] - ckeditor <ignored> (Minor issue, XSS through direct copy/paste by victim, no identified patch)
 	[jessie] - ckeditor <ignored> (Minor issue)
-	- ckeditor3 <unfixed> (unimportant; bug #1015217)
+	- ckeditor3 <removed> (unimportant; bug #1015217)
 	- fckeditor <removed>
 	NOTE: Negligible security impact
 CVE-2018-17959
@@ -664427,7 +664427,7 @@ CVE-2014-5191 (Cross-site scripting (XSS) vulnerability in the Preview plugin be
 	- ckeditor 4.4.4+dfsg1-1 (bug #760736)
 	[wheezy] - ckeditor <not-affected> (Preview plugin not yet present)
 	[squeeze] - ckeditor <not-affected> (Preview plugin not yet present)
-	- ckeditor3 <unfixed> (bug #1015217)
+	- ckeditor3 <removed> (bug #1015217)
 	[bookworm] - ckeditor3 <ignored> (Minor issue, only used by Horde editor)
 	[bullseye] - ckeditor3 <no-dsa> (Minor issue)
 	[buster] - ckeditor3 <end-of-life> (No longer supported in LTS)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc656688304a5486bc84594df2dd6de939bc3448

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cc656688304a5486bc84594df2dd6de939bc3448
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250411/1e2d2564/attachment.htm>


More information about the debian-security-tracker-commits mailing list